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What is claimed is: 




certificate system on a network, comprising: 
& certificate authority connected to/sajd^networkrsaid certificate authority 
pted to allow the de fmttten-of a visual certificate comprising a redemption 
denomination defined by an issuer user, and a first public key identifier defined by 



said certificate authority; 

a certificate issuance module for creation of an issued certificate upon 
^selectebleacquisition of said ykfual certificate by an acquirer user across said network, 
said issued certificate including said redemption denomination and said first public key 
identifier, said creation ot said issued certificate in cluding a private key assio necLat^ 
time_of^said^^ of said virtual certificate, wherein said redemption 

denomination, said/rst public key identifier, and said assigned private key are stored 
at said certificate afuthority in association with said issued certificate; 

a certificate authentication module for authorization of a redemption of said 
issued certificate at a redemption location to a holder of said issued certificate, based 
upon redemption submittal of said redemption denomination, said first public key 
identifier/ and said-pr-rvatgjsey, and a matching comparison of said redemption 
denomination, said first public key identifier, and said' private key stored at said 
certificate authority; and 

means to cancel further redemption of said issued certificate at said certificate 
Authority. 

2. The certificate system of Claim 1 , wherein said defined virtual certificate 
includes a secon^u blic key identifier d efined by said issuer user, wherein 
said second public key identifier is stored at said certificate authority, and 
wherein said authorization module requires a submittal of said second public 
key identifier, and a matching comparison to said second public key identifier 
stored at said certificate authority. 
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3. 




The certificate system of Claim 1 , wherein said a certificate issuance module 
requires the submittal of a payment agent by said acquirer user. 

he certificate system oKTlairrf 3, wherein said required submittal of said 
payment agent forgarta acquirer user includes an authorization to transfer funds 
from said payment agent for/said acquirer upon creation of said issued 
certify 

The certificate system of Cliim 3, wherein said required submittal of said 
payment agent for said acquirer user includes an authorization to transfer funds 
from said payment agent faf said acquirer upon redemption of said issued 
certificate. 

The certificate system of dlaim 1 , wherein said certificate issuance module 
includes means to deliver said redemption denomination, said first public key 
identifier, and said entered/private key to said acquirer user. 
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The certificate system ©f Claim 6, wherein saicUiiea^ 
redemption denomination, said first public key identifier, and said entered 
private key to said acquirer user comprises a^grintedjorm^f said issued 
certificate. 
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8. The certificate systeml of Claim 6, wherein said means to deliver said 
redemption denomination, said first public key identifier, and said entered 
private key to said acquirer user comprises an electronic form of said issued 
certificate. 
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9. The certificate system of Claim 1 , wherein said holder of said issued certificate 
is said acquirer user. 

1 0/ The certificate system of Claim 1 , wherein said holder of said issued certificate 
is an alternate recipient wno submits said private key. 



)ient^o s 
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1 1 . The certificate system of Claim 1 , wherein said assigned private key is 
entered by said acquirer user during said ^sele ctable acquisition of~sai9~virtual 
certificate. 

l2T\^me certificate system of Claim 11, wherein said entered, assigned private 
ke^is unique to a single Required issued certificate. 

13. The certificate system of Claim 1 1 , wherein said entered, assigned private 
key is a private purchase key unique to said acquirer user. 

14. The certificate system of Claim 1 1 , wherein said entered, assigned private 
key is a private acquirer facility access key unique to said acquirer user. 
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15. The certificate system of Claim 1, wherein said assigned private key is 
established by said certificate authority during said selectable acquisition of said 
virtual certificate. 

A process within a transaction network, compiling the steps of: 
defining a virtual certificate on a certificate authority, said defined virtual 
certificate comprised of a redemption denomination defined by an issuer user, and a 
first public key identifier defined by said certificate authority; 

creating an issued certificate upon Requisition of said virtual certificate by an 
acquirer user on said transaction network, said issued certificate including said 
redemption denomination and said ftret public key identifier, said creation of said 
issued certificate including an establishment a private key, said redemption 
denomination, said first public key identifier, and said established private key stored 
at said certificate authority in association with said issued certificate; 

authorizing a redempticfn of said issued certificate at a redemption location to a 
holder of said issued certificate, based upon redemption submittal of said 
redemption denomination/said first public key identifier, and said private key, and a 
matching comparison of ssaid redemption denomination, said first public key identifier, 
and said private key stored at said certificate authority; and 
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Cpfrf^ cancelincjjurtfier redemptiqh of said issued certificate at said certificate 

1 7. The process of Claim 1 6, wherein said step of defining said virtual certificate, 
5 wherein said defined virtual certificate includes a second public key identifier defined 

by said issuer user, wherein said step of creating said issued certificate includes the 
storage of said second public key identifier at said certificate authority, and wherein 
said step of authorizing said redemption of said issued certificate includes a submittal 
of said second public key identifier, and a matching comparison to said second 
1 0 public key identifier stored at said certificate authority. 



1 8. The process of Claim 1 6 
certificate includes the submittal 



wherein said step of creation of said issued 
bf a payment agent by said acquirer user. 
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1 9. The process of Claim 1 8, wherein said submittal of said payment agent for 
said acquirer user includes an authorization to transfer funds from said payment agent 
for said acquirer during said step of creation of said issued certificate. 



20 



20. The process of Claim ife, wherein said submittal of said payment agent for 
said acquirer user includes anflauthorization to transfer funds from said payment agent 
for said acquirer during said step of redemption of said issued certificate. 
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21 . The process of Claim/1 6, wherein said step of creation of said issued 
certificate includes a delivery of said redemption denomination, said first public key 
identifier, and said entered private key to said acquirer user. 
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22. The process of Claim 21 , wherein said delivered redemption denomination, 
said first public key identifier, and said entered private key to said acquirer user are 



included in a printed form ol 



said issued certificate. 



23. The process of Claim 21 , wherein said delivered redemption denomination, 
said first public key identifier, and said entered private key to said acquirer user are 
included in an electronic for m of said issued certificate. 
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24. The process of Claim 16, wherein within said authorizing step, said holder of 
said issued certificate is said acquirer user. 

"2b. ^Tfie process of Claim jXwherein within said authorizing step, said holder of 
said issued certificates an alternate recipient which submits said private key. 




26. The process of Claim 16, wherein said established private key is entered by 
said acquirer user. 

27^ / The process of Claim^6, wherein said entered established private key is 
unique to a single acquirecMssued certificate. 



28. The process of Claim 26, wherein said entered established private key is a 
private purchase key that is unique to said acquirer user. 

29. The process of Claim 26, wherein said entered established private key is a 
private acquirer facility access key that is unique to said acquirer user. 
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30. The process of Claim 16, wherein said established private key is established 
by said certificate authority and communicated to said acquirer. 
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